Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91A8596C1C6F11F0ACC3ECACDAE4EC9C.roa
File: 91A8596C1C6F11F0ACC3ECACDAE4EC9C.roa (raw, json)
Hash identifier: oDhFEANBm7Os492IYUN9I5f4ZUMLXVLKTtgO1efIQfc=
Subject key identifier: C3:E4:6E:11:69:50:7A:22:B3:A3:18:02:E1:D5:C5:83:D9:BC:CC:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91A8596C1C6F11F0ACC3ECACDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 16:09:56 +0000
ROA not before: Fri 18 Apr 2025 16:09:51 +0000
ROA not after: Thu 30 Oct 2025 16:09:51 +0000
asID: 11042
IP address blocks: 156.249.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85287 (0x14d27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 16:09:51 2025 GMT
Not After : Oct 30 16:09:51 2025 GMT
Subject: CN=68027954-6869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:93:fe:c3:ff:8e:61:0b:56:e0:68:09:65:
e8:b6:97:ee:4b:16:33:b2:da:59:89:7d:25:4f:ea:
7e:df:4f:52:55:db:c6:63:06:4c:07:07:0e:d5:70:
25:19:31:8b:24:a9:4c:26:24:0e:98:cb:9a:f3:2d:
1e:0d:7c:fa:e9:ea:f1:2a:71:ff:3f:d6:2f:be:58:
2f:14:25:05:6d:a8:9f:5a:08:ae:36:21:71:a9:ca:
ff:52:90:b2:6b:6a:3c:44:ab:3c:59:3c:15:a3:80:
b4:84:08:40:e6:ed:0e:ca:02:56:56:cc:1f:1e:2b:
ca:60:e1:96:34:ae:a3:02:9d:3c:11:69:98:f4:4d:
cc:d3:9e:a2:db:80:2e:58:0f:6c:dd:43:bd:1d:b5:
89:92:e1:cc:6d:c1:8c:a5:c8:ba:bf:11:79:b9:19:
38:d7:a2:94:2d:88:49:6f:a9:3a:82:70:15:78:d4:
a8:00:a7:54:b1:13:e4:58:78:6a:49:c9:2d:fb:c7:
fb:fb:d9:0e:98:61:e6:9f:37:fe:ba:5e:9d:73:8e:
d2:83:68:b1:21:c7:06:3f:30:1a:ab:e7:65:14:8f:
20:b1:75:b8:fd:f1:d6:59:a4:cf:d4:54:df:23:95:
a7:8b:18:bc:83:90:ef:74:26:bd:3b:04:5c:00:8a:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:6E:11:69:50:7A:22:B3:A3:18:02:E1:D5:C5:83:D9:BC:CC:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91A8596C1C6F11F0ACC3ECACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.26.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:2f:62:b2:bf:07:bf:b8:19:9e:13:58:8e:fe:c5:b2:15:ae:
15:df:7a:19:fd:0b:8f:0d:81:00:f2:3b:21:79:67:03:f1:f2:
70:ea:f8:fe:af:6b:aa:88:a3:d9:e3:59:10:57:e7:87:80:e0:
b0:97:5f:3b:88:21:1e:36:b9:1b:84:a3:a0:6c:6a:cc:4b:f9:
63:91:c9:3c:a7:00:eb:32:f1:ff:e0:eb:e3:87:2f:ad:e1:38:
9a:08:b2:1e:39:15:a1:75:ed:d5:bf:06:26:f4:cf:39:6d:ed:
09:b1:0a:a7:df:dc:d7:ba:7f:0e:a8:b2:08:f7:4e:66:82:d6:
31:46:24:d7:a8:22:48:ed:2b:0d:e5:57:a5:3e:a0:72:ac:2c:
c7:88:64:a4:30:d1:69:4e:b9:b2:ea:96:f2:a9:a9:a6:fc:88:
e9:e6:26:ea:d4:49:d2:83:ed:fb:2d:3a:b1:f6:e0:89:bd:a7:
f2:b6:7b:8a:8a:c2:ca:cb:90:5d:68:e4:2c:0e:31:cd:82:b9:
e4:6d:7a:bf:7a:d8:39:86:5c:c9:a9:ef:55:05:99:bf:d0:59:
f1:c9:97:35:c2:de:84:56:ff:b9:7b:41:c4:23:32:88:66:a6:
f1:d4:55:f5:01:7d:db:1b:e2:72:26:81:73:15:bb:1b:40:63:
5e:79:e3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:40 2025 by rpki-client on console.sobornost.net